Share via


VSS Event ID:12347 and 1234 The Registry Writer failed to respond to a query from VSS

Question

Tuesday, June 9, 2020 4:48 AM

Hi Folks , 

Getting below error on server with OS :Win2k12 r2 
Log Name:      Application
Source:        VSS
Date:          6/7/2020 7:36:47 AM
Event ID:      12347
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      not mentioned 
Description:
Volume Shadow Copy Service error: An internal inconsistency was detected in trying to contact shadow copy service writers.  The Registry Writer failed to respond to a query from VSS. Check to see that the Event Service and Volume Shadow Copy Service are operating properly, and please check the Application event log for any other events. 

Issue : Backup is getting failed , system writers are missing .Upon restarting cryptsvc all the writers are stable.but still not able to take system state backup.Also tried taking local system state backup which went through successfully.
When i checked Eventvwer found below VSS related events : 
Also could see below event IDs:

Log Name:      Application
Source:        VSS
Date:          6/6/2020 1:01:46 AM
Event ID:      12348
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      Notmentioned 
Description:
Volume Shadow Copy Service warning: VSS was denied access to the root of volume \?\Volume{61a44f4f-5d9d-11e7-80c8-000d3a02ca79}\ Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly.  Check security on the volume, and try the operation again.

All replies (10)

Tuesday, June 9, 2020 2:02 PM

Reboot the server and check the status.

You can try following resolution for Event ID: 12347

/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee264216(v=ws.10)?redirectedfrom=MSDN

And Following resolution for Event ID: 12348

/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd364979(v=ws.10)


Wednesday, June 10, 2020 2:03 AM

Hi,

1.Make sure the below services can be started normally without errors.

    • Cryptographic Services
    • VSS service
    • COM+ Event System service

2.Please run the below command to grant the permissions and try list writers again.

  • Takeown /f %windir%\winsxs\temp\PendingRenames /a icacls %windir%\winsxs\temp\PendingRenames /grant "NT AUTHORITY\SYSTEM:(RX)"
  • icacls %windir%\winsxs\temp\PendingRenames /grant "NT Service\trustedinstaller:(F)"
  • icacls %windir%\winsxs\temp\PendingRenames /grant BUILTIN\Users:(RX)
  • Takeown /f %windir%\winsxs\filemaps\ /a icacls %windir%\winsxs\filemaps\.* /grant "NT AUTHORITY\SYSTEM:(RX)"
  • icacls %windir%\winsxs\filemaps\.* /grant "NT Service\trustedinstaller:(F)"
  • icacls %windir%\winsxs\filemaps\.* /grant BUILTIN\Users:(RX)

3.please check if there are any error from  Microsoft-Windows-CAPI2 in event log when we run “vssadmin list writers”.

For more information about system writer missing, you can refer to here:

https://social.technet.microsoft.com/Forums/windowsserver/en-US/e507f811-50f1-4d18-94e5-487246279bb5/system-writer-missing?forum=windowsbackup

Hope this can help you.

Best Regards,

Daniel

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact


Wednesday, June 10, 2020 9:17 AM

Will try these and update 


Wednesday, June 10, 2020 9:19 AM

After completing the 2nd step, do we need to reboot the server ..?


Thursday, June 11, 2020 1:25 AM

you needn't restart your server

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact


Thursday, June 11, 2020 7:32 AM

thanks for the confirmation.. will try and let you know the update


Thursday, June 11, 2020 7:44 AM

OK, hope this can help.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact


Wednesday, June 17, 2020 1:19 AM

Hi,

I am writing here to confirm current situation.

If the above suggestion are helpful to you, please be kind enough to "mark it as an answer" for helping more people.

Regards,
Daniel

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact


Wednesday, June 17, 2020 11:21 AM

Hi Danie,

After implementing/applying above steps. Still see the issue.

Thanks,

Sravana 


Monday, June 22, 2020 8:17 AM

Hi,

I have already see your thread, in fact, for deep research on the , I advise open a support ticket with Microsoft. There are best resources can help you.

https://support.microsoft.com/en-gb/hub/4343728/support-for-business
On forum platform, we can do limited for you, what i can come up with has been delivered.

Thank you for understanding and cooperating.

Best Regards,

Daniel

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact